Obviously a leak..... but is it worth fixing?

[SnDPhoenix]

The leak i am talking about is running partition related task. As a test i went ahead and ran my Acronis Disk Director Suite sandboxed, i then created a partition with the program and when i closed the program and deleted the contents of sandbox, the partition i created ended up happening outside the sandbox, in other words, it was still there (which doesnt suprise me as sandboxie is made to work at os level, not partition level). Heres the thing though, is it worth even worrying about, cause afaik, there arent any viruses that perfrom at partition level (and if there are, its very few), so in other words, this isnt something im really worried about.

[tzuk]

Actually a while ago I needed to backup a the contents of a hard disk on one computer and restore the contents to a partition on another disk on another computer.

Since I didn't want the backup/restore application to stay on my computer any longer than I needed it, I installed and ran that application sandboxed.

The backup application ran fine, but the restore application got access denied trying to modify the partition table and restore the data. I had to add OpenFilePath statements to make it work.

So, I have a bit of a hard time accepting what you say, because I did actually play with this, with contrary results. However, I can suggest the following.

Perhaps the Acronis is modifying the partition from its driver (if it has one?) rather than through its application. In this case, Sandboxie would not even look at the requests coming in from the driver. Sandboxie would just let them pass through and make the changes as they please.

[SnDPhoenix]

Well all i did was just open the program and clicked on some allocated space and click "create partition" and it happened outside the program, i didnt do any backup or restore task like you did, so how did it leak out the sandbox you might ask.....

Perhaps the Acronis is modifying the partition from its driver (if it has one?) rather than through its application.

Bingo! thats the problem, when i first tried to run the program sandboxed, it said something about no priviliges related to the driver, so i went into the ini and set BlockDriver=y to BlockDriver=n, and then it worked fine, but seeing as i had just allowed drivers, i guess thats how it was able to perform the action outside the sandbox.

[Unknown_User_451]

I'd like to be protected on all sides...

Please tell us if you work as an administrator or a LUA?

(I'm going all the lengths of being secure: I'm on LUA, all my internet-facing programs are SandBoxIEd)

Can you please repeat this test as LUA as well?
Will it work?

[SnDPhoenix]

booBot, youre already protected from this "leak" it only leaked with me because i basically allowed it to leak.